Enforcing Standards

Modify your Bash scripts or YAML to return a non-zero exit code if a 'Critical' vulnerability is found.

bash trivy fs --severity CRITICAL --exit-code 1 .

This forces developers to fix critical issues before their code can ever reach production.